2 lines
2.7 KiB
JSON
2 lines
2.7 KiB
JSON
{"affected":[{"affectedData":[{"product":"freeswitch","vendor":"signalwire","versions":[{"status":"affected","version":"< 1.11.2"}]}],"source":"security-advisories@github.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:freeswitch:freeswitch:*:*:*:*:*:*:*:*","matchCriteriaId":"417C729C-139C-43C0-962C-19A59B99C0DF","versionEndExcluding":"1.11.2","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"FreeSWITCH is an open-source software telecommunications platform. Before version 1.11.2, an integer underflow in switch_xml_decode() can cause an undersized heap allocation when an XML document declares an entity with an empty replacement value. Subsequent copying overruns the allocated buffer. An unauthenticated attacker who can reach a SIP profile with presence management enabled and DTD processing permitted can trigger the vulnerability through a crafted SIP PUBLISH request. Exploitation can corrupt heap memory and terminate the FreeSWITCH process, interrupting all active calls. This vulnerability is fixed in version 1.11.2."}],"id":"CVE-2026-116788","lastModified":"2026-11-10T18:42:13.317","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.2,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-116788","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-09T17:38:41.957565Z","version":"2.0.3"}}]},"published":"2026-11-05T20:17:46.240","references":[{"source":"security-advisories@github.com","tags":["Patch"],"url":"https://github.com/signalwire/freeswitch/commit/587474a1584488f0c04201e6e61efe76aa5bda01"},{"source":"security-advisories@github.com","tags":["Release Notes"],"url":"https://github.com/signalwire/freeswitch/releases/tag/v1.11.2"},{"source":"security-advisories@github.com","tags":["Vendor Advisory","Mitigation"],"url":"https://github.com/signalwire/freeswitch/security/advisories/GHSA-f73w-xph4-pjp3"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"},{"lang":"en","value":"CWE-131"},{"lang":"en","value":"CWE-191"}],"source":"security-advisories@github.com","type":"Secondary"}]}
|